Umbraco: >> Umbraco Cms >> 4.11.9 Security Vulnerabilities
The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does not require authentication, which allows remote attackers to execute arbitrary ASP.NET code via a crafted SOAP request.
CVSS Score
7.5
EPSS Score
0.004
Published
2014-12-27
Page 2